LLMs at the Core - From Attention to Action in Scaling Security Teams
Explore practical tools leveraging LLMs to scale security teams, streamline workflows, and enhance decision-making in complex environments. Gain insights on automating tasks and improving security processes.
The Ownership Battle Between Engineering and InfoSec
Explore the ownership dynamics between Engineering and InfoSec teams in DevSecOps, focusing on effective result consumption and action implementation.
The North Star: Risk-Driven Security - DevSecCon
Discover risk-first threat modeling to identify and prioritize security vulnerabilities, focusing on business risks for effective risk reduction and stakeholder buy-in.
Motivating Developers to Engage in DevSecOps - Hands-on Docker Security
Dive into DevSecOps with hands-on Docker activities, learning to identify and prevent vulnerabilities while strengthening your software security skills.
Weaving Application Security's Scale - Enabling Business Through Partnerships
Explore AppSec's growth journey and learn how to scale security across organizations by fostering partnerships and enabling wider business objectives.
Startup Security: Starting a Security Program at a Startup - AppSecCali 2019
Strategies for implementing security at startups, including approaches, integration, and success factors. Covers key priorities, challenges, and essential components of a startup security program.
Fuzzing Like a Security Engineer - ETHTaipei 2023
Master advanced fuzzing techniques and security engineering practices to identify vulnerabilities and strengthen code security through hands-on demonstrations and expert guidance.
AuthMatrix - Simplified Authorization Testing for Web Applications
Simplified authorization testing for web apps using AuthMatrix, a Burp Suite extension. Learn common insecurity patterns, mapping techniques, and effective testing methods for access control vulnerabilities.
Misconfigured CORS and Web Application Security Challenges
Explore CORS misconfiguration vulnerabilities and the challenges of implementing advanced browser security features, with insights on balancing security and operational complexity.
Your Smartcard is Dumb: A Brief History of Hacking Access Control Systems
Explore the vulnerabilities of modern access control systems through live demonstrations, understanding fundamental design flaws and historical attacks on card-based security mechanisms.
Threat Modeling Kubernetes - A Lightspeed Introduction
Discover threat modeling for Kubernetes: Learn to identify risks, understand adversarial techniques, and implement preventive measures to enhance cloud-native system security and delivery velocity.
How to Promote the Use of Best Practices and Automate Security Policies
Explore container security automation in CI/CD pipelines, focusing on vulnerability scanning, admission controls, and runtime security using tools like OPA and Kubernetes Admission Controls.
Using Hardware Protected Keys with the Linux Crypto API
Learn to use hardware-protected keys with Linux Crypto API for enhanced security in embedded systems. Explore implementation, benefits, and potential challenges in this in-depth presentation.
Leakage Resilience in Cryptography - FSE 2024 Session
Explore cutting-edge research on leakage resilience in cryptography, examining advanced techniques to protect against side-channel attacks and enhance data security.
The SecDevOpronomicon - Arcane Secrets for Scaling Your Company’s Security
Uncover arcane secrets for scaling security efforts in fast-paced development environments. Learn high-value engineering techniques, custom analyses, and CI/CD pipeline integration to enhance SecDevOps practices.
An Unlikely Friendship - Why Security Engineers and Product Managers Should Be Working Together
Discover strategies for security engineers to collaborate with product managers, enhancing security features, accelerating team growth, and unlocking revenue from security-conscious customers.
Distributed Security Alerting
Explore distributed security alerting with Spotify's approach, covering customizable architecture, plugins, and data-driven security metrics for effective engineering and leadership.
Experiencias en Google VRP - Yesenia Trejo y Adrián Pedrazzoli - Ekoparty - 2021: Bug Bounty Space
Expertos en seguridad comparten experiencias en el Programa de Recompensas por Vulnerabilidades de Google, abordando aspectos positivos, desafiantes e inesperados del proceso de reporte y explotación de vulnerabilidades.
Learning the Power of the -Not My Responsibility- Mindset
Discover how shifting security responsibility to the business can improve accountability, reduce friction, and prevent burnout among security engineers while enhancing overall company security.
Lessons Learned from the DevSecOps Trenches
Panel discussion on scaling AppSec programs, featuring insights from security leaders at major tech companies. Covers high-ROI efforts, effective tools, and lessons learned to help organizations improve their security practices.
Optimize Your Pentesters Time
Optimize pentesting resources with Hunter, an open-source tool grading websites for low-risk security issues. Learn how eBay saved 10-15% of their pentesting budget and improved efficiency.